Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233322e302f32322d3234203d3e203236353438.roa
File:                     3135372e3235342e3233322e302f32322d3234203d3e203236353438.roa (raw, json)
Hash identifier:          sc9WjRsGJw/WvSMMEVMADDBOH7QnDmQZxOZhWtVSo7E=
Subject key identifier:   08:F3:4D:2E:BB:AB:7F:F6:6C:7D:CD:34:CA:AF:81:2A:70:73:E2:89
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       45CC172956CD9580B5D482259E06475553392392
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233322e302f32322d3234203d3e203236353438.roa
Signing time:             Fri 30 Dec 2022 19:54:22 +0000
ROA not before:           Fri 30 Dec 2022 19:49:22 +0000
ROA not after:            Fri 29 Dec 2023 19:54:22 +0000
asID:                     26548
IP address blocks:        157.254.232.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cc:17:29:56:cd:95:80:b5:d4:82:25:9e:06:47:55:53:39:23:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:22 2022 GMT
            Not After : Dec 29 19:54:22 2023 GMT
        Subject: CN=08F34D2EBBAB7FF66C7DCD34CAAF812A7073E289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:b0:77:aa:65:0c:e1:5b:08:39:f4:a8:6f:
                    30:5c:26:db:7a:62:f6:4f:ba:61:b6:50:f5:f9:e3:
                    ff:ad:ce:3f:3b:3d:bf:2c:7e:49:3a:5e:cc:5c:fc:
                    44:c9:5b:94:83:75:13:28:d5:4e:62:26:01:ff:27:
                    7e:d8:46:7c:3a:76:92:a1:5f:f3:f6:86:d3:d8:4b:
                    55:8f:35:d1:d4:d1:9b:9b:5b:e7:6a:d3:89:b0:a0:
                    8d:ac:16:e5:2f:d4:47:d4:a2:7d:88:37:cb:b1:5a:
                    95:58:3b:e2:a5:46:8f:03:f0:e5:40:18:8a:d2:12:
                    44:c1:a0:df:de:4c:04:45:0c:d1:ec:53:2c:ea:72:
                    e0:8c:42:12:06:96:0a:47:f7:46:7b:40:48:52:51:
                    33:50:a5:03:15:06:e3:10:20:f6:72:73:f4:b3:d6:
                    94:23:c4:71:69:9f:3a:05:6c:85:71:58:39:00:fa:
                    be:ab:0f:61:07:d5:ce:e6:42:96:ec:a7:ff:68:ad:
                    e0:10:b5:f0:0f:e8:0a:85:36:14:a1:92:40:03:fd:
                    5a:e4:0f:49:39:bf:3e:2b:38:4a:21:16:4d:bd:9f:
                    19:7d:45:0e:07:ca:af:73:2d:ca:d0:0d:25:bc:c9:
                    39:b0:79:70:1d:24:20:8f:d7:3f:ee:12:4d:a1:30:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:4D:2E:BB:AB:7F:F6:6C:7D:CD:34:CA:AF:81:2A:70:73:E2:89
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3233322e302f32322d3234203d3e203236353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:e3:d6:61:81:79:e0:89:08:b2:4e:88:91:35:59:0b:b1:82:
         4f:2b:6e:93:44:7a:dd:91:b2:07:40:bb:11:cf:5c:e7:bf:13:
         a6:33:f8:5b:d5:29:c3:17:e1:4c:b0:cf:f8:51:7a:6d:fd:fb:
         75:e4:26:3d:c4:f3:d8:4e:6a:76:ad:67:3c:0b:24:96:17:fc:
         9d:28:49:fa:e3:d5:5d:37:bd:21:19:c4:ce:37:28:90:d4:91:
         83:90:ac:4b:3e:6b:52:dc:11:c8:4a:29:b1:44:5c:82:17:f0:
         07:74:86:9d:d4:09:98:05:64:bd:ae:83:93:ee:5b:35:56:60:
         d5:52:7a:7b:01:50:6d:26:20:23:a0:1d:ce:f5:04:b0:38:67:
         76:94:87:4f:f5:dc:9f:85:23:97:67:90:d3:0f:90:31:13:01:
         01:7b:aa:20:17:f9:13:1d:7c:2d:42:6f:16:fb:93:88:63:e1:
         5f:3a:2a:0d:c8:eb:ef:fc:8c:1e:17:b5:35:f0:d3:7a:71:a5:
         c3:c1:e3:28:a2:1d:e6:df:7a:28:25:9d:d3:cd:fd:fe:4f:67:
         fa:68:8d:a6:66:eb:d1:8c:58:3b:73:4f:7d:99:cd:27:31:b0:
         a0:87:b0:05:25:ab:d1:78:b0:d0:8f:e1:e9:69:25:02:d9:c6:
         7c:c8:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----